p2ppayment-livetrade[.]com[.]exchange-trademarket[.]com

This domain is flagged for elevated-risk brand impersonation, specifically targeting MEXC, a cryptocurrency exchange platform. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with the legitimate MEXC service, likely to harvest credentials, payment details, or distribute malicious software under the guise of account recovery or verification processes. Infrastructure analysis reveals the domain was registered on February 21, 2026, and resolves to the IP address 198.12.80.250, hosted on AS36352 (HostPapa) in the United States. The SSL certificate is classified as R12, a low-trust indicator often associated with fraudulent or ephemeral domains. The domain appears on one security blocklist and is flagged by 12 out of 95 security vendors on VirusTotal. The page title, 'Account Suspended,' is a common social engineering tactic to create urgency and prompt victims to engage with malicious links or contact fake support channels. Mitigation against this specific threat type requires a multi-layered approach. Organizations should implement domain monitoring to detect newly registered domains containing brand keywords or typosquatting variations. Network-level protections, such as blocking the IP 198.12.80.250 and associated CIDR ranges, should be enforced. End-users should be trained to recognize impersonation tactics, including fake 'account suspended' notifications, and verify domain authenticity through official channels. Additionally, security teams should review logs for connections to the identified IP and domain to assess potential compromise or data exposure.